DOS: HP JetDirect LCD Modification (TCP/9001)
This signature detects attempts to exploit a vulnerability in the printer control language used in HP JetDirect printers. Attackers can send maliciously crafted packets to TCP/9001 to print arbitrary messages on HP printers with LCD panels.
Extended Description
Certain versions of HP JetDirect enabled printers provide a function (PJL command) that changes the LCD display on a printer over TCP/IP. Arbitrary strings can be sent to the LCD display by a remote user using this command. This represents more of a nuisance than a threat, although it is conceivable that the ability to modify the display could be used in some sort of "social engineering" scheme.
Affected Products
Hp jetdirect
References
BugTraq: 2245
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Hp